deep-research
Warn
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
README.mdandrequirements.txtsuggest installing a tool namedsearch-clifrom a third-party Homebrew tap (199-biotechnologies/tap). This external tool is the primary mechanism for data retrieval and operates outside the standard package registries. - [COMMAND_EXECUTION]: The skill uses the Bash tool and
subprocess.runto execute various commands, includingsearch-cli,weasyprintfor PDF generation, and several internal Python scripts (citation_manager.py,evidence_store.py, etc.) to maintain research state and validate output. - [PROMPT_INJECTION]: The skill is susceptible to Indirect Prompt Injection (Category 8). It ingests untrusted data from the web (Phase 3: RETRIEVE) and interpolates this data into prompts for synthesis and critique (Phases 5 and 6). While the skill employs structured evidence capture and validation scripts, the synthesis of external content remains an inherent risk factor for prompt-based manipulation.
Audit Metadata